GEICO
Disclosed Jan 29, 20242 years ago71,490 affectedSettled
Quote tool abused to steal driver's license numbers; part of USD 11.3M NY penalties
Hackers exploited GEICO's online auto insurance quoting tool in an industry-wide campaign to steal driver's license numbers and birth dates, some later used for fraudulent pandemic unemployment claims. The NY AG and DFS secured USD 11.3M from GEICO and Travelers combined.
What is known
| People affected | 71,490 (as reported by the organization) |
|---|---|
| Disclosed | Jan 29, 2024 |
| Discovered | Jun 1, 2023 |
| Happened | May 27, 2023 |
| Attack | Hacking |
| Data exposed | Government IDs, Dates of birth, Names |
| Sector | Insurance · US |
| Status | Settled |
| Lawsuit or fine | USD 11.3M combined NY AG and DFS penalties with Travelers (Nov 2024) |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: GEICOoag.ca.gov · Official notice | Official notice |
| Washington Attorney General breach notice: GEICOatg.wa.gov · Official notice | Official notice |
| NY AG: USD 11.3 Million from auto insurance companies over data breachesag.ny.gov · Regulator | Regulator |
| Indiana Attorney General 2024 data breach report: GEICOin.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Indiana AGresidents of IN | Jan 29, 2024 | 2,327 |
| Washington AGresidents of WA | Jan 30, 2024 | 1,186 |
| California AGresidents of CA | Jan 31, 2024 | |
| Researchtotal | Nov 25, 2024 |
History of this record
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 71490 · backfill source
- 2026-09-25 · disclosed: 2024-01-30 to 2024-01-29 · backfill source
- 2026-09-25 · status: confirmed to settled · seed source
- 2026-09-25 · lawsuit: empty to USD 11.3M combined NY AG and DFS penalties with Travelers (Nov 2024) · seed source
- 2026-09-25 · sector: health to insurance · seed source
- 2026-09-25 · data_types: [] to ["government-id","dob","names"] · seed source
- 2026-09-25 · summary: empty to Hackers exploited GEICO's online auto insurance quoting tool in an industry-wide campaign to steal driver's license numbers and birth dates, some later used for fraudulent pandemic unemployment claims. The NY AG and DFS secured USD 11.3M fr · seed source
- 2026-09-25 · title: empty to Quote tool abused to steal driver's license numbers; part of USD 11.3M NY penalties · seed source
- 2026-09-25 · sector: other to health · backfill source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · disclosed: 2024-01-31 to 2024-01-30 · backfill source
- 2026-09-25 · discovered: empty to 2023-06-01 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.